last executing test programs: 58.523703652s ago: executing program 3 (id=543): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f0000000340)) 58.39511217s ago: executing program 3 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) 58.226449538s ago: executing program 3 (id=550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x10001, 0x12) 58.00887382s ago: executing program 3 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 57.902733446s ago: executing program 3 (id=557): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0) 57.350402632s ago: executing program 3 (id=569): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) unshare(0x2040400) r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 57.121008638s ago: executing program 32 (id=569): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) unshare(0x2040400) r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 50.369185264s ago: executing program 4 (id=667): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000080)=0xffffe, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0xec4a}], 0x1, 0x2020, 0x0) 50.263781892s ago: executing program 4 (id=669): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) pselect6(0x40, &(0x7f0000000340)={0xd, 0xa3cd, 0x6, 0x7, 0x9, 0x9, 0x5, 0x1}, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000023c0)={0x58, 0x0, r1, [{0x3, 0x6, 0x9, 0x80, '/dev/sr0\x00'}, {0x1, 0xe018, 0x1, 0x6f, '$'}]}, 0x58) 50.092297821s ago: executing program 4 (id=670): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000840)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000680)={0x0, 0x0, r1, r2, 0x5, 0x7, 0x59, 0xffff9cf9, {0x8, 0xfffd, 0x5, 0x1000, 0xa, 0x166, 0x0, 0xff, 0xba, 0x1, 0x200, 0x2, 0x8000, 0x9, "0fb212b00ee4d654775c28bb3d276d330a5b6de68fcc0137e68b050553e46ed9"}}) 49.898084046s ago: executing program 4 (id=674): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x40402) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x6, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x0, 0x80000000, 0x0, 'queue0\x00', 0xffffff00}) 49.66264394s ago: executing program 4 (id=676): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 49.47550525s ago: executing program 4 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 33.29492088s ago: executing program 33 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.778878828s ago: executing program 2 (id=1303): syz_open_procfs$userns(0x0, &(0x7f0000000040)) socket(0x2b, 0x80801, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0) 2.530846312s ago: executing program 0 (id=1307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b80)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x4000000) 2.352559598s ago: executing program 0 (id=1309): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1f}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.243290806s ago: executing program 0 (id=1311): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) 2.088626017s ago: executing program 0 (id=1314): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.784663567s ago: executing program 5 (id=1320): setreuid(0xee01, 0xee01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x18) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x200) 1.672375993s ago: executing program 5 (id=1323): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 1.576495619s ago: executing program 5 (id=1325): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x4, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44, 0x2040}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xbbfb}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x44}}, 0x8000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='geneve0\x00') 1.419583284s ago: executing program 5 (id=1328): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) 1.405982492s ago: executing program 1 (id=1329): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.305803059s ago: executing program 5 (id=1331): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011007389040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800600121f", 0x2e}], 0x1}, 0x0) 1.21912977s ago: executing program 1 (id=1332): r0 = socket$inet6(0xa, 0x3, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x100000000, {0x7, 0xe54, 0x0, {0x400000000, 0x0, 0x0, 0x8, 0x200000000, 0x0, 0x2, 0x9, 0x5, 0x8000, 0x400000, 0x0, 0x0, 0x1ff, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 1.200034549s ago: executing program 2 (id=1333): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1.135822552s ago: executing program 1 (id=1334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x8000000000000, 0x314000, 0x2000000}) 1.027054295s ago: executing program 2 (id=1336): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002000600020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 897.669174ms ago: executing program 1 (id=1337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a300000000014000000110001"], 0x94}}, 0x0) close(r0) 681.37408ms ago: executing program 1 (id=1339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)={0x2c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) 566.44668ms ago: executing program 2 (id=1341): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0) 501.760917ms ago: executing program 1 (id=1343): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}]}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 459.521513ms ago: executing program 2 (id=1344): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) 426.928256ms ago: executing program 6 (id=1345): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1000000d}) epoll_wait(r1, &(0x7f0000000480)=[{}], 0x1, 0xb) 370.867241ms ago: executing program 2 (id=1346): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001c40)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220107"], 0x0}, 0x0) 356.085228ms ago: executing program 6 (id=1347): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000400)=""/144, 0x90}], 0x1, 0x802, 0x0) 290.179417ms ago: executing program 6 (id=1348): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 241.840914ms ago: executing program 6 (id=1349): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) 190.188381ms ago: executing program 6 (id=1350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffffb7000040"]) 153.866466ms ago: executing program 0 (id=1351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 88.919097ms ago: executing program 0 (id=1352): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="41000000010001", 0x7) close(r0) 31.129423ms ago: executing program 5 (id=1353): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000001640)={{}, {0x77359400}}, 0x0) 0s ago: executing program 6 (id=1354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008002"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. [ 84.885871][ T5810] cgroup: Unknown subsys name 'net' [ 85.068216][ T5810] cgroup: Unknown subsys name 'cpuset' [ 85.077532][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.715812][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.872323][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.874698][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.884062][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.888560][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.902392][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.910719][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.918426][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.926840][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.926967][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.942834][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.950873][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.953888][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.959229][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.967066][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.973675][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.988044][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.994813][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.996105][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.013741][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.015336][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.028379][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.035639][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.040610][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.061713][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.071088][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.677545][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 91.791201][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 91.898343][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 91.977211][ T1211] cfg80211: failed to load regulatory.db [ 92.019703][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 92.142940][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.150720][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.158433][ T5820] bridge_slave_0: entered allmulticast mode [ 92.166356][ T5820] bridge_slave_0: entered promiscuous mode [ 92.188095][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 92.237188][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.245637][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.253719][ T5820] bridge_slave_1: entered allmulticast mode [ 92.261031][ T5820] bridge_slave_1: entered promiscuous mode [ 92.288029][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.295612][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.303501][ T5830] bridge_slave_0: entered allmulticast mode [ 92.311037][ T5830] bridge_slave_0: entered promiscuous mode [ 92.389385][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.399597][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.406922][ T5830] bridge_slave_1: entered allmulticast mode [ 92.414470][ T5830] bridge_slave_1: entered promiscuous mode [ 92.424458][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.437140][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.541538][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.549209][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.557382][ T5832] bridge_slave_0: entered allmulticast mode [ 92.565506][ T5832] bridge_slave_0: entered promiscuous mode [ 92.576106][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.588949][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.630104][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.637729][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.645353][ T5829] bridge_slave_0: entered allmulticast mode [ 92.653342][ T5829] bridge_slave_0: entered promiscuous mode [ 92.661384][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.669189][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.677056][ T5832] bridge_slave_1: entered allmulticast mode [ 92.684760][ T5832] bridge_slave_1: entered promiscuous mode [ 92.707311][ T5820] team0: Port device team_slave_0 added [ 92.717381][ T5820] team0: Port device team_slave_1 added [ 92.737743][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.744975][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.752200][ T5829] bridge_slave_1: entered allmulticast mode [ 92.760992][ T5829] bridge_slave_1: entered promiscuous mode [ 92.853106][ T5830] team0: Port device team_slave_0 added [ 92.872979][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.880547][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.888233][ T5822] bridge_slave_0: entered allmulticast mode [ 92.895766][ T5822] bridge_slave_0: entered promiscuous mode [ 92.904798][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.912019][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.920148][ T5822] bridge_slave_1: entered allmulticast mode [ 92.928101][ T5822] bridge_slave_1: entered promiscuous mode [ 92.951228][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.962986][ T5830] team0: Port device team_slave_1 added [ 92.970304][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.977645][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.004479][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.015687][ T5836] Bluetooth: hci0: command tx timeout [ 93.018695][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.028907][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.055284][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.093609][ T5835] Bluetooth: hci3: command tx timeout [ 93.095969][ T5836] Bluetooth: hci1: command tx timeout [ 93.105939][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.118457][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.151604][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.165928][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.173771][ T5836] Bluetooth: hci2: command tx timeout [ 93.180857][ T5836] Bluetooth: hci4: command tx timeout [ 93.220100][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.227301][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.253394][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.268793][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.323256][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.330351][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.357104][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.384934][ T5829] team0: Port device team_slave_0 added [ 93.394126][ T5832] team0: Port device team_slave_0 added [ 93.463242][ T5829] team0: Port device team_slave_1 added [ 93.471497][ T5832] team0: Port device team_slave_1 added [ 93.502179][ T5820] hsr_slave_0: entered promiscuous mode [ 93.509244][ T5820] hsr_slave_1: entered promiscuous mode [ 93.535411][ T5822] team0: Port device team_slave_0 added [ 93.590650][ T5830] hsr_slave_0: entered promiscuous mode [ 93.598078][ T5830] hsr_slave_1: entered promiscuous mode [ 93.605016][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.612959][ T5830] Cannot create hsr debugfs directory [ 93.642400][ T5822] team0: Port device team_slave_1 added [ 93.667383][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.675265][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.702274][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.715248][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.722323][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.749044][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.803823][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.810846][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.837117][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.851265][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.858452][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.885693][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.994908][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.001940][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.028721][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.041561][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.048755][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.074792][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.162411][ T5832] hsr_slave_0: entered promiscuous mode [ 94.168946][ T5832] hsr_slave_1: entered promiscuous mode [ 94.175916][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.184169][ T5832] Cannot create hsr debugfs directory [ 94.208636][ T5829] hsr_slave_0: entered promiscuous mode [ 94.215646][ T5829] hsr_slave_1: entered promiscuous mode [ 94.221822][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.229715][ T5829] Cannot create hsr debugfs directory [ 94.336272][ T5822] hsr_slave_0: entered promiscuous mode [ 94.342934][ T5822] hsr_slave_1: entered promiscuous mode [ 94.349673][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.357544][ T5822] Cannot create hsr debugfs directory [ 94.763831][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.779418][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.821381][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.851950][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.924425][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.941051][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.974202][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.998811][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.061526][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.076966][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.088524][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.103649][ T5836] Bluetooth: hci0: command tx timeout [ 95.130573][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.173248][ T5835] Bluetooth: hci1: command tx timeout [ 95.178834][ T5836] Bluetooth: hci3: command tx timeout [ 95.217164][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.241515][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.253270][ T5835] Bluetooth: hci2: command tx timeout [ 95.259920][ T5836] Bluetooth: hci4: command tx timeout [ 95.260039][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.279117][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.397177][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.412030][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.440412][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.452779][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.500133][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.605613][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.621122][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.644319][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.667543][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.674928][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.691148][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.698373][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.767602][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.778374][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.808691][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.815912][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.830678][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.838068][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.880023][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.887226][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.898655][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.905848][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.928001][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.950829][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.976053][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.995241][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.022955][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.030189][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.106694][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.113947][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.167026][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.210337][ T3037] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.217599][ T3037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.267194][ T3037] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.274531][ T3037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.470041][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.529946][ T5822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.583498][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.888632][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.980710][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.130012][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.179099][ T5836] Bluetooth: hci0: command tx timeout [ 97.215451][ T5832] veth0_vlan: entered promiscuous mode [ 97.254831][ T5836] Bluetooth: hci3: command tx timeout [ 97.260337][ T5835] Bluetooth: hci1: command tx timeout [ 97.269270][ T5820] veth0_vlan: entered promiscuous mode [ 97.281099][ T5832] veth1_vlan: entered promiscuous mode [ 97.290799][ T5829] veth0_vlan: entered promiscuous mode [ 97.329014][ T5829] veth1_vlan: entered promiscuous mode [ 97.345636][ T5835] Bluetooth: hci4: command tx timeout [ 97.350270][ T5836] Bluetooth: hci2: command tx timeout [ 97.358294][ T5820] veth1_vlan: entered promiscuous mode [ 97.407405][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.454383][ T5832] veth0_macvtap: entered promiscuous mode [ 97.470429][ T5830] veth0_vlan: entered promiscuous mode [ 97.482176][ T5832] veth1_macvtap: entered promiscuous mode [ 97.515329][ T5830] veth1_vlan: entered promiscuous mode [ 97.541358][ T5829] veth0_macvtap: entered promiscuous mode [ 97.552807][ T5820] veth0_macvtap: entered promiscuous mode [ 97.567930][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.587714][ T5820] veth1_macvtap: entered promiscuous mode [ 97.602519][ T5829] veth1_macvtap: entered promiscuous mode [ 97.615294][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.652221][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.662541][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.671593][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.680786][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.717904][ T5830] veth0_macvtap: entered promiscuous mode [ 97.731742][ T5830] veth1_macvtap: entered promiscuous mode [ 97.747644][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.781766][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.797867][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.820448][ T5822] veth0_vlan: entered promiscuous mode [ 97.842798][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.854661][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.865620][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.875369][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.884634][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.907659][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.916775][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.927112][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.936254][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.959183][ T5822] veth1_vlan: entered promiscuous mode [ 97.969736][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.028702][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.050424][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.072145][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.081931][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.082618][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.099376][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.112159][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.215704][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.237293][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.266393][ T5822] veth0_macvtap: entered promiscuous mode [ 98.311008][ T5822] veth1_macvtap: entered promiscuous mode [ 98.355991][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.372595][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.383845][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.408059][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.438496][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.440750][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.468192][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.512009][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.543167][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.551954][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.563993][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.595575][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.611875][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.728463][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.765266][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.839193][ T5945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.875009][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.882919][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.964986][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.986905][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.083495][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.148186][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.258058][ T5836] Bluetooth: hci0: command tx timeout [ 99.333943][ T5836] Bluetooth: hci1: command tx timeout [ 99.334207][ T5835] Bluetooth: hci3: command tx timeout [ 99.374014][ T453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.398799][ T453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.414546][ T5835] Bluetooth: hci4: command tx timeout [ 99.414842][ T5836] Bluetooth: hci2: command tx timeout [ 100.027578][ T5974] process 'syz.4.13' launched './file2' with NULL argv: empty string added [ 100.708306][ T5991] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.222420][ T6000] mkiss: ax0: crc mode is auto. [ 101.364476][ T5905] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.573644][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 101.587204][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.607905][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.626831][ T5905] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 101.687096][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.712756][ T5905] usb 4-1: config 0 descriptor?? [ 102.252331][ T5905] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 102.408648][ T5905] corsair 0003:1B1C:1B02.0001: Failed to get K90 initial state (error -71). [ 102.563566][ T5905] usb 4-1: USB disconnect, device number 2 [ 103.289762][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 103.563337][ T5905] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 103.575808][ T6059] loop9: detected capacity change from 0 to 7 [ 103.590146][ T6043] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.600062][ T6043] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.614981][ T6043] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.627397][ T6043] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.636846][ T6043] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.646940][ T6043] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.655915][ T6043] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.664191][ T6043] ldm_validate_partition_table(): Disk read failed. [ 103.671555][ T6043] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.680496][ T6043] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.689720][ T6043] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.698555][ T6043] Dev loop9: unable to read RDB block 0 [ 103.705343][ T6043] loop9: unable to read partition table [ 103.711334][ T6043] loop9: partition table beyond EOD, truncated [ 103.720969][ T6059] ldm_validate_partition_table(): Disk read failed. [ 103.732598][ T6059] Dev loop9: unable to read RDB block 0 [ 103.740074][ T6059] loop9: unable to read partition table [ 103.746379][ T6059] loop9: partition table beyond EOD, truncated [ 103.748447][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1022, setting to 64 [ 103.763179][ T6059] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 103.763179][ T6059] ) failed (rc=-5) [ 103.807881][ T5905] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 103.840040][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.855803][ T5905] usb 3-1: config 0 descriptor?? [ 103.862616][ T6053] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.063647][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 104.119192][ T6067] netlink: 32 bytes leftover after parsing attributes in process `syz.4.51'. [ 104.202520][ T6067] gretap1: entered promiscuous mode [ 104.357612][ T5905] kye 0003:0458:0087.0002: hidraw0: USB HID v4.01 Device [HID 0458:0087] on usb-dummy_hcd.2-1/input0 [ 104.584465][ T5905] usb 3-1: USB disconnect, device number 2 [ 104.655311][ T6079] fido_id[6079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 105.538158][ T30] audit: type=1326 audit(1749609902.022:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6106 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8018e929 code=0x7ffc0000 [ 105.591527][ T6111] futex_wake_op: syz.3.70 tries to shift op by 36; fix this program [ 105.633372][ T30] audit: type=1326 audit(1749609902.062:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6106 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8018e929 code=0x7ffc0000 [ 105.753248][ T30] audit: type=1326 audit(1749609902.062:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6106 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f8018e929 code=0x7ffc0000 [ 105.848583][ T30] audit: type=1326 audit(1749609902.062:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6106 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8018e929 code=0x7ffc0000 [ 105.879539][ T6117] Illegal XDP return value 4294967274 on prog (id 6) dev N/A, expect packet loss! [ 105.953384][ T30] audit: type=1326 audit(1749609902.082:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6106 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f8018e929 code=0x7ffc0000 [ 106.103388][ T30] audit: type=1326 audit(1749609902.082:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6106 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8018e929 code=0x7ffc0000 [ 106.211642][ T30] audit: type=1326 audit(1749609902.082:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6106 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8018e929 code=0x7ffc0000 [ 106.330248][ T30] audit: type=1326 audit(1749609902.112:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6106 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8018e929 code=0x7ffc0000 [ 106.438846][ T30] audit: type=1326 audit(1749609902.112:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6106 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8018e929 code=0x7ffc0000 [ 106.543706][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 106.592699][ T6130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.79'. [ 107.038937][ T6138] loop8: detected capacity change from 0 to 1 [ 107.070097][ T6138] Dev loop8: unable to read RDB block 1 [ 107.083175][ T6138] loop8: unable to read partition table [ 107.094410][ T6138] loop8: partition table beyond EOD, truncated [ 107.111713][ T6138] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 107.571674][ T30] audit: type=1326 audit(1749609904.062:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8018e929 code=0x7ffc0000 [ 108.135836][ T6169] warning: `syz.3.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.507243][ T6207] Bluetooth: MGMT ver 1.23 [ 109.563378][ T6210] sctp: [Deprecated]: syz.1.115 (pid 6210) Use of int in maxseg socket option. [ 109.563378][ T6210] Use struct sctp_assoc_value instead [ 110.071607][ T6219] hsr0: entered promiscuous mode [ 110.753128][ T5898] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.932738][ T5898] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 110.953419][ T5824] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 110.967678][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.005359][ T5898] usb 3-1: config 0 descriptor?? [ 111.030924][ T5898] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 111.136974][ T5824] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 111.157873][ T5824] usb 1-1: config 0 has no interface number 0 [ 111.187380][ T5824] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 111.203143][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.227711][ T5824] usb 1-1: Product: syz [ 111.232002][ T5824] usb 1-1: Manufacturer: syz [ 111.255232][ T5824] usb 1-1: SerialNumber: syz [ 111.283610][ T5824] usb 1-1: config 0 descriptor?? [ 111.312710][ T5824] hub 1-1:0.132: bad descriptor, ignoring hub [ 111.326612][ T5824] hub 1-1:0.132: probe with driver hub failed with error -5 [ 111.345800][ T5824] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input5 [ 111.368234][ T6255] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.516713][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.599383][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 111.608821][ T6260] ipvlan2: entered allmulticast mode [ 111.614597][ T6260] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 111.634760][ T978] usb 1-1: USB disconnect, device number 2 [ 111.713136][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 111.743240][ T43] usb 4-1: config 0 has no interfaces? [ 111.756130][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.773784][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.792228][ T43] usb 4-1: Product: syz [ 111.797048][ T43] usb 4-1: Manufacturer: syz [ 111.802433][ T43] usb 4-1: SerialNumber: syz [ 111.810366][ T43] usb 4-1: config 0 descriptor?? [ 111.858536][ T5898] gspca_sunplus: reg_w_riv err -71 [ 111.903451][ T5898] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 111.943611][ T5898] usb 3-1: USB disconnect, device number 3 [ 111.985710][ T6267] input: syz1 as /devices/virtual/input/input6 [ 112.066274][ T43] usb 4-1: USB disconnect, device number 3 [ 112.321259][ T6278] netlink: 'syz.0.146': attribute type 12 has an invalid length. [ 112.358048][ T6280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.148'. [ 112.534429][ T3037] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.568298][ T5885] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.576888][ T3037] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.792513][ T6293] netlink: 'syz.1.153': attribute type 10 has an invalid length. [ 112.903536][ T5885] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.956315][ T6293] team0: Port device geneve1 added [ 112.996798][ T6299] netlink: 'syz.3.156': attribute type 83 has an invalid length. [ 113.502160][ T5943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.903258][ T5943] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.093859][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 115.133714][ T5943] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 115.163329][ T5943] usb 2-1: config 0 has no interface number 0 [ 115.169526][ T5943] usb 2-1: config 0 interface 184 has no altsetting 0 [ 115.211602][ T5943] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 115.231512][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.242085][ T5943] usb 2-1: Product: syz [ 115.248926][ T5943] usb 2-1: Manufacturer: syz [ 115.256577][ T5943] usb 2-1: SerialNumber: syz [ 115.292499][ T5943] usb 2-1: config 0 descriptor?? [ 115.352139][ T5943] smsc75xx v1.0.0 [ 115.367582][ T5943] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 115.396674][ T5943] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 115.595516][ T43] usb 2-1: USB disconnect, device number 2 [ 115.768568][ T6363] capability: warning: `syz.0.185' uses deprecated v2 capabilities in a way that may be insecure [ 115.798843][ T6363] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 115.811880][ T6363] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 116.693274][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.704157][ T6388] ======================================================= [ 116.704157][ T6388] WARNING: The mand mount option has been deprecated and [ 116.704157][ T6388] and is ignored by this kernel. Remove the mand [ 116.704157][ T6388] option from the mount to silence this warning. [ 116.704157][ T6388] ======================================================= [ 116.739143][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.833948][ T6388] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 116.923507][ T6388] overlayfs: overlapping lowerdir path [ 117.383470][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 117.592797][ T6403] macvtap1: entered promiscuous mode [ 117.598420][ T6403] vlan0: entered promiscuous mode [ 117.610628][ T6403] macvtap1: entered allmulticast mode [ 117.616641][ T6403] vlan0: entered allmulticast mode [ 117.621978][ T6403] veth0_vlan: entered allmulticast mode [ 118.126246][ T6422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 118.392145][ T6431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.215'. [ 118.594860][ T43] kernel write not supported for file /uhid (pid: 43 comm: kworker/1:1) [ 118.743354][ T6442] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 120.357639][ T6495] sctp: [Deprecated]: syz.2.244 (pid 6495) Use of int in maxseg socket option. [ 120.357639][ T6495] Use struct sctp_assoc_value instead [ 120.651077][ T6504] cifs: Unknown parameter 'mode' [ 120.706791][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 120.706811][ T30] audit: type=1400 audit(1749609917.202:22): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=6506 comm="syz.1.250" key_serial=428361404 key_desc="_uid_ses.0" [ 122.003223][ T5943] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 122.105315][ T5940] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.175208][ T5943] usb 2-1: config 0 has no interfaces? [ 122.188943][ T5943] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.217760][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.249277][ T5943] usb 2-1: config 0 descriptor?? [ 122.289631][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 122.306988][ T5940] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 122.332675][ T5940] usb 5-1: config 0 has no interface number 0 [ 122.357521][ T5940] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 122.374629][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.408080][ T5940] usb 5-1: Product: syz [ 122.412349][ T5940] usb 5-1: Manufacturer: syz [ 122.418769][ T5940] usb 5-1: SerialNumber: syz [ 122.454051][ T5940] usb 5-1: config 0 descriptor?? [ 122.467478][ T5940] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 122.492220][ T6547] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 122.500373][ T5943] usb 2-1: USB disconnect, device number 3 [ 122.699082][ T5940] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 122.745333][ T5940] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 122.764565][ T6554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.270'. [ 123.168377][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 123.174507][ T5943] usb 5-1: USB disconnect, device number 2 [ 123.238541][ T5943] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 123.307763][ T5943] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 123.342308][ T5943] quatech2 5-1:0.51: device disconnected [ 123.586815][ T6581] netlink: 32 bytes leftover after parsing attributes in process `syz.2.282'. [ 123.628060][ T6581] sch_tbf: peakrate 4 is lower than or equals to rate 5 ! [ 123.694345][ T30] audit: type=1326 audit(1749609920.192:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.3.284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f8018e929 code=0x0 [ 123.863296][ T5943] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.036723][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 124.050407][ T5943] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 124.079685][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.101395][ T5943] usb 2-1: config 0 descriptor?? [ 124.584956][ T6627] program syz.2.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.941156][ T5943] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 124.952235][ T5943] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 124.983509][ T5943] asix 2-1:0.0: probe with driver asix failed with error -71 [ 124.998712][ T5943] usb 2-1: USB disconnect, device number 4 [ 125.073159][ T5940] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.143461][ T5898] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.243356][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 125.250558][ T5940] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 125.253316][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.265948][ T5940] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 125.277214][ T5940] usb 3-1: config 6 has no interface number 0 [ 125.284055][ T5940] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 125.294299][ T5940] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.303909][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 125.315734][ T5940] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 125.316095][ T5898] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 125.333653][ T5898] usb 4-1: config 0 has no interface number 0 [ 125.342014][ T5898] usb 4-1: config 0 interface 184 has no altsetting 0 [ 125.342404][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.367815][ T5898] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.373098][ T5940] usb 3-1: Product: syz [ 125.381314][ T5940] usb 3-1: Manufacturer: syz [ 125.386262][ T5940] usb 3-1: SerialNumber: syz [ 125.397982][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.398072][ T5940] hso 3-1:6.2: Failed to find INT IN ep [ 125.417324][ T5898] usb 4-1: Product: syz [ 125.422338][ T5898] usb 4-1: Manufacturer: syz [ 125.428268][ T5898] usb 4-1: SerialNumber: syz [ 125.444367][ T5898] usb 4-1: config 0 descriptor?? [ 125.451948][ T5898] smsc75xx v1.0.0 [ 125.455729][ T5898] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 125.473320][ T5898] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 125.709166][ T5898] usb 4-1: USB disconnect, device number 4 [ 126.207144][ T5824] usb 3-1: USB disconnect, device number 4 [ 126.301295][ T6670] syz.0.322 (6670) used greatest stack depth: 19592 bytes left [ 126.411636][ T6674] ip6tnl1: entered promiscuous mode [ 126.645738][ T6687] loop6: detected capacity change from 0 to 524287999 [ 126.663614][ T6687] buffer_io_error: 23 callbacks suppressed [ 126.663636][ T6687] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.703488][ T6687] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.711478][ T6687] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.773291][ T6687] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.793230][ T6687] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.801302][ T6687] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.853363][ T6687] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.861446][ T6687] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.877023][ T6687] ldm_validate_partition_table(): Disk read failed. [ 126.906806][ T6687] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.923575][ T6687] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.932066][ T6687] Dev loop6: unable to read RDB block 0 [ 126.942210][ T6687] loop6: unable to read partition table [ 126.963469][ T6687] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 127.126506][ T43] IPVS: starting estimator thread 0... [ 127.145234][ T6695] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 127.243557][ T6696] IPVS: using max 33 ests per chain, 79200 per kthread [ 127.990290][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 128.099161][ T6730] Zero length message leads to an empty skb [ 128.456108][ T5835] Bluetooth: hci5: command 0x1003 tx timeout [ 128.464070][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 128.932434][ T6759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.359'. [ 128.973937][ T6759] sch_fq: defrate 0 ignored. [ 129.133154][ T5824] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.315368][ T5824] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 129.336351][ T5824] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 129.355908][ T5824] usb 4-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 129.380750][ T5824] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 129.399919][ T5824] usb 4-1: config 220 has no interface number 2 [ 129.413638][ T5824] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 129.427644][ T5824] usb 4-1: config 220 interface 0 has no altsetting 0 [ 129.457825][ T5824] usb 4-1: config 220 interface 76 has no altsetting 0 [ 129.473357][ T5824] usb 4-1: config 220 interface 1 has no altsetting 0 [ 129.491717][ T5824] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 129.502355][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.531814][ T5824] usb 4-1: Product: syz [ 129.542844][ T5824] usb 4-1: Manufacturer: syz [ 129.552806][ T5824] usb 4-1: SerialNumber: syz [ 129.790951][ T5824] usb 4-1: selecting invalid altsetting 0 [ 129.801830][ T5824] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 129.808495][ T5824] usb 4-1: No valid video chain found. [ 129.826665][ T5824] usb 4-1: selecting invalid altsetting 0 [ 129.841722][ T5824] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 129.851862][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 129.872376][ T5824] usb 4-1: USB disconnect, device number 5 [ 129.875205][ T6795] netlink: 36 bytes leftover after parsing attributes in process `syz.0.376'. [ 129.920997][ T6795] vlan2: entered allmulticast mode [ 130.508830][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.390'. [ 130.564950][ T6823] netlink: 277 bytes leftover after parsing attributes in process `syz.2.389'. [ 131.041364][ T30] audit: type=1326 audit(1749609927.532:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6809 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea4b8e929 code=0x7fc00000 [ 131.100575][ T30] audit: type=1326 audit(1749609927.532:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6809 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feea4b8e929 code=0x7fc00000 [ 131.150202][ T30] audit: type=1326 audit(1749609927.532:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6809 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea4b8e929 code=0x7fc00000 [ 131.202274][ T30] audit: type=1326 audit(1749609927.532:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6809 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea4b8e929 code=0x7fc00000 [ 131.257298][ T30] audit: type=1326 audit(1749609927.532:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6809 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea4b8e929 code=0x7fc00000 [ 131.284756][ T30] audit: type=1326 audit(1749609927.532:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6809 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea4b8e929 code=0x7fc00000 [ 131.307079][ T30] audit: type=1326 audit(1749609927.532:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6809 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea4b8e929 code=0x7fc00000 [ 131.330792][ T30] audit: type=1326 audit(1749609927.532:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6809 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea4b8e929 code=0x7fc00000 [ 131.357402][ T30] audit: type=1326 audit(1749609927.532:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6809 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea4b8e929 code=0x7fc00000 [ 131.402726][ T30] audit: type=1326 audit(1749609927.532:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6809 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea4b8e929 code=0x7fc00000 [ 131.522734][ T6845] syz.1.398 (6845) used greatest stack depth: 18776 bytes left [ 131.707999][ T5905] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.894051][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 131.918715][ T5905] usb 4-1: config 0 has no interfaces? [ 131.944131][ T5905] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.953666][ T5905] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.961707][ T5905] usb 4-1: Manufacturer: syz [ 132.005811][ T5905] usb 4-1: config 0 descriptor?? [ 132.011325][ T6861] loop8: detected capacity change from 0 to 1 [ 132.151014][ T6861] Dev loop8: unable to read RDB block 1 [ 132.157074][ T6861] loop8: unable to read partition table [ 132.227708][ T6861] loop8: partition table beyond EOD, truncated [ 132.263475][ T6861] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 132.395836][ T5824] usb 4-1: USB disconnect, device number 6 [ 132.473187][ T5905] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.633130][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 132.647380][ T5905] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 132.666465][ T5905] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.686207][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.731801][ T5905] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.752373][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.763073][ T5905] usb 3-1: Product: syz [ 132.767303][ T5905] usb 3-1: Manufacturer: syz [ 132.779761][ T5905] usb 3-1: SerialNumber: syz [ 132.940361][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.947269][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.213294][ T5905] usb 3-1: 0:2 : does not exist [ 133.543120][ T5940] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.619557][ T5905] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 133.689464][ T5905] usb 3-1: USB disconnect, device number 5 [ 133.723667][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.742496][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.775512][ T5940] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 133.790626][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.805854][ T5940] usb 1-1: config 0 descriptor?? [ 133.959419][ T6894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.421'. [ 134.033440][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.208621][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 134.237612][ T5940] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 134.245377][ T5940] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 134.255778][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.270963][ T43] usb 5-1: config 0 has no interface number 0 [ 134.277487][ T5940] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 134.284992][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.296429][ T5940] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 134.303798][ T5940] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 134.311135][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.323382][ T5940] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 134.330275][ T5940] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 134.338843][ T43] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 134.350851][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.364040][ T5940] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 134.380803][ T43] usb 5-1: config 0 descriptor?? [ 134.501844][ T6907] netlink: 830 bytes leftover after parsing attributes in process `syz.1.427'. [ 134.698336][ T5898] usb 1-1: USB disconnect, device number 3 [ 135.014490][ T43] uclogic 0003:28BD:0094.0004: pen parameters not found [ 135.037404][ T43] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring [ 135.057341][ T43] usb 5-1: USB disconnect, device number 3 [ 135.798646][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 136.393221][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.581701][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 136.609077][ T43] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 136.639623][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.666556][ T43] usb 5-1: Product: syz [ 136.671208][ T43] usb 5-1: Manufacturer: syz [ 136.684199][ T43] usb 5-1: SerialNumber: syz [ 136.697250][ T43] usb 5-1: config 0 descriptor?? [ 137.136233][ T5824] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.153518][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.182974][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.353913][ T5824] usb 2-1: Using ep0 maxpacket: 16 [ 137.381727][ T5824] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 137.399495][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.420101][ T5824] usb 2-1: Product: syz [ 137.431896][ T5824] usb 2-1: Manufacturer: syz [ 137.440797][ T43] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 137.449947][ T5824] usb 2-1: SerialNumber: syz [ 137.462441][ T7008] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 137.503755][ T5824] r8152-cfgselector 2-1: Unknown version 0x0000 [ 137.525127][ T5824] r8152-cfgselector 2-1: config 0 descriptor?? [ 137.576828][ T43] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 137.604164][ T43] usb 5-1: USB disconnect, device number 4 [ 137.613312][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.475'. [ 137.887881][ T7025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.481'. [ 137.977498][ T5898] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 138.049063][ T7034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.830283][ T7073] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 138.847898][ T7073] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 138.879691][ T7073] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 138.889132][ T7073] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 138.914078][ T7075] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 138.939246][ T7075] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 138.958530][ T7075] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 138.976316][ T7075] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 139.464755][ T7094] tipc: Started in network mode [ 139.489688][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 139.489709][ T30] audit: type=1400 audit(1749609935.780:38): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7099 comm="syz.3.517" dest=20002 netif=wpan0 [ 139.489910][ T7094] tipc: Node identity 0.......@:, cluster identity 4711 [ 139.626596][ T5836] Bluetooth: hci0: command 0x0401 tx timeout [ 139.839824][ T5943] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.867010][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 139.907252][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.972362][ T7117] bridge_slave_1 (unregistering): left allmulticast mode [ 139.981610][ T7117] bridge_slave_1 (unregistering): left promiscuous mode [ 139.988836][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.011127][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 140.020943][ T5943] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.035031][ T5943] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.048348][ T5943] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 140.060768][ T5943] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 140.070492][ T5943] usb 2-1: Product: syz [ 140.074720][ T5943] usb 2-1: Manufacturer: syz [ 140.090188][ T5943] hub 2-1:4.0: USB hub found [ 140.117932][ T5898] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.278138][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.301649][ T5898] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 140.312987][ T5943] hub 2-1:4.0: 3 ports detected [ 140.318185][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.330579][ T5898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.350147][ T5898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.362078][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.372714][ T5898] usb 3-1: Product: syz [ 140.377179][ T5898] usb 3-1: Manufacturer: syz [ 140.381865][ T5898] usb 3-1: SerialNumber: syz [ 140.439053][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 140.451174][ T5885] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 140.462792][ T5885] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 140.477799][ T5885] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.489405][ T5885] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.502964][ T5885] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.512111][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.642912][ T5898] usb 3-1: 0:2 : does not exist [ 140.676478][ T5898] usb 3-1: USB disconnect, device number 6 [ 140.758613][ T5885] usb 5-1: GET_CAPABILITIES returned 0 [ 140.764396][ T5885] usbtmc 5-1:16.0: can't read capabilities [ 140.962058][ T5943] usb 2-1: USB disconnect, device number 6 [ 140.995566][ T5885] usb 5-1: USB disconnect, device number 5 [ 141.315473][ T7165] netlink: 48 bytes leftover after parsing attributes in process `syz.3.547'. [ 141.862843][ T7187] lo: entered promiscuous mode [ 141.946936][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 142.322483][ T7208] input: syz0 as /devices/virtual/input/input7 [ 142.876452][ T5885] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.950844][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.059873][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 143.083574][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.103013][ T5885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.118256][ T5885] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.144087][ T5885] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.163252][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.193408][ T5885] usb 3-1: Product: syz [ 143.202120][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.204230][ T5885] usb 3-1: Manufacturer: syz [ 143.220682][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.228659][ T5885] usb 3-1: SerialNumber: syz [ 143.229748][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.242983][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.250818][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.506989][ T5885] usb 3-1: 0:2 : does not exist [ 143.531972][ T5885] usb 3-1: USB disconnect, device number 7 [ 143.719827][ T7235] chnl_net:caif_netlink_parms(): no params data found [ 143.769379][ T7251] netlink: 'syz.4.588': attribute type 2 has an invalid length. [ 143.907421][ T7259] overlayfs: workdir and upperdir must be separate subtrees [ 144.038716][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.046729][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.055525][ T7235] bridge_slave_0: entered allmulticast mode [ 144.063621][ T7235] bridge_slave_0: entered promiscuous mode [ 144.072779][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.080360][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.088075][ T7235] bridge_slave_1: entered allmulticast mode [ 144.096140][ T7235] bridge_slave_1: entered promiscuous mode [ 144.183059][ T7235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.205257][ T7235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.236146][ T30] audit: type=1400 audit(1749609940.223:39): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7267 comm="syz.1.594" dest=20002 netif=wpan0 [ 144.402014][ T7235] team0: Port device team_slave_0 added [ 144.440482][ T7235] team0: Port device team_slave_1 added [ 144.527813][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.535442][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.562023][ T7235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.580869][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.588547][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.624988][ T5824] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 144.638001][ T7235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.780759][ T7235] hsr_slave_0: entered promiscuous mode [ 144.788635][ T7235] hsr_slave_1: entered promiscuous mode [ 144.796147][ T7235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.802834][ T5824] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 144.804226][ T7235] Cannot create hsr debugfs directory [ 144.834837][ T5824] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.847380][ T5824] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 144.864386][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.883430][ T5824] usb 2-1: Product: syz [ 144.891961][ T5824] usb 2-1: Manufacturer: syz [ 144.898306][ T5824] usb 2-1: SerialNumber: syz [ 144.912665][ T5824] usb 2-1: config 0 descriptor?? [ 144.954065][ T5824] usb 2-1: selecting invalid altsetting 0 [ 145.201314][ T43] usb 2-1: USB disconnect, device number 7 [ 145.281473][ T7235] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.292890][ T7235] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.305927][ T7235] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.322191][ T7235] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.436222][ T5835] Bluetooth: hci3: command tx timeout [ 145.532295][ T7235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.556486][ T7311] serio: Serial port ptm0 [ 145.560888][ T7235] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.575694][ T3037] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.582919][ T3037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.645409][ T3037] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.652698][ T3037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.188228][ T7235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.228940][ T7334] mmap: syz.1.619 (7334) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.247433][ T7331] can0: slcan on ttyS3. [ 146.377708][ T7331] can0 (unregistered): slcan off ttyS3. [ 146.386393][ T7331] Falling back ldisc for ttyS3. [ 146.499084][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 146.520139][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'. [ 146.977233][ T7358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.996424][ T7358] bond0: (slave bond1): Enslaving as an active interface with an up link [ 147.088218][ T7235] veth0_vlan: entered promiscuous mode [ 147.106659][ T7235] veth1_vlan: entered promiscuous mode [ 147.152405][ T5943] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 147.192741][ T7235] veth0_macvtap: entered promiscuous mode [ 147.220832][ T7235] veth1_macvtap: entered promiscuous mode [ 147.277881][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.309042][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.339565][ T7235] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.360590][ T5943] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 147.376997][ T7235] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.377027][ T5943] usb 5-1: config 0 has no interface number 0 [ 147.397687][ T7235] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.413574][ T7235] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.423965][ T5943] usb 5-1: config 0 interface 41 has no altsetting 0 [ 147.433915][ T5943] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 147.458490][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.479288][ T5943] usb 5-1: Product: syz [ 147.514913][ T5943] usb 5-1: Manufacturer: syz [ 147.524946][ T5943] usb 5-1: SerialNumber: syz [ 147.536171][ T5943] usb 5-1: config 0 descriptor?? [ 147.622780][ T453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.630719][ T453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.659399][ T5835] Bluetooth: hci3: command tx timeout [ 147.730428][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.739304][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.306521][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.645'. [ 148.365300][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.645'. [ 148.434701][ T5943] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 148.462878][ T5943] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 148.489200][ T5943] usb 5-1: USB disconnect, device number 6 [ 148.569057][ T7407] netlink: 56 bytes leftover after parsing attributes in process `syz.1.650'. [ 148.833087][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 148.845273][ T7422] netlink: 56 bytes leftover after parsing attributes in process `syz.1.656'. [ 148.868116][ T7422] netlink: 244 bytes leftover after parsing attributes in process `syz.1.656'. [ 148.893568][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 149.464097][ T7445] ipvlan2: entered promiscuous mode [ 149.469487][ T7445] ipvlan2: entered allmulticast mode [ 149.475477][ T7445] macvlan1: entered allmulticast mode [ 149.481105][ T7445] veth1_vlan: entered allmulticast mode [ 149.514858][ T5943] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.685905][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 149.693231][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.722135][ T5943] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 149.739490][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.756338][ T5943] usb 2-1: Product: syz [ 149.779762][ T5943] usb 2-1: Manufacturer: syz [ 149.794319][ T5943] usb 2-1: SerialNumber: syz [ 149.804295][ T5943] usb 2-1: config 0 descriptor?? [ 149.878311][ T5835] Bluetooth: hci3: command tx timeout [ 150.226869][ T7468] ref_ctr_offset mismatch. inode: 0x2b7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 150.260372][ T5943] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 150.427064][ T7470] netlink: 'syz.0.680': attribute type 2 has an invalid length. [ 150.698730][ T5943] usb 2-1: USB disconnect, device number 8 [ 150.926002][ T5940] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.107701][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 151.120579][ T5940] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 151.139781][ T5940] usb 1-1: config 0 has no interface number 0 [ 151.148865][ T5940] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 151.162271][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.182282][ T5940] usb 1-1: Product: syz [ 151.186803][ T5940] usb 1-1: Manufacturer: syz [ 151.191440][ T5940] usb 1-1: SerialNumber: syz [ 151.215879][ T5940] usb 1-1: config 0 descriptor?? [ 151.228925][ T5940] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 151.467123][ T5940] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 151.527960][ T5940] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 151.562717][ T30] audit: type=1326 audit(1749609947.080:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7496 comm="syz.1.693" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84b2d8e929 code=0x0 [ 151.882247][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 151.883537][ T5943] usb 1-1: USB disconnect, device number 4 [ 151.925617][ T5943] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 151.976778][ T5943] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 152.009636][ T5943] quatech2 1-1:0.51: device disconnected [ 152.113419][ T5835] Bluetooth: hci3: command tx timeout [ 152.535208][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 154.310554][ T7568] ipvlan2: entered promiscuous mode [ 154.333189][ T7568] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 154.360481][ T7568] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 154.765392][ T7583] netlink: 36 bytes leftover after parsing attributes in process `syz.0.730'. [ 155.826565][ T30] audit: type=1326 audit(1749609951.064:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7617 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1f8e929 code=0x7ffc0000 [ 155.919879][ T30] audit: type=1326 audit(1749609951.064:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7617 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1f8e929 code=0x7ffc0000 [ 156.026071][ T30] audit: type=1326 audit(1749609951.064:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7617 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71d1f8e929 code=0x7ffc0000 [ 156.071582][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.748'. [ 156.097902][ T30] audit: type=1326 audit(1749609951.064:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7617 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1f8e929 code=0x7ffc0000 [ 156.171190][ T30] audit: type=1326 audit(1749609951.064:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7617 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1f8e929 code=0x7ffc0000 [ 156.313153][ T30] audit: type=1326 audit(1749609951.074:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7617 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f71d1f8e929 code=0x7ffc0000 [ 156.397633][ T30] audit: type=1326 audit(1749609951.074:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7617 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1f8e929 code=0x7ffc0000 [ 156.452900][ T30] audit: type=1326 audit(1749609951.074:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7617 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f71d1f8e929 code=0x7ffc0000 [ 156.478230][ T30] audit: type=1326 audit(1749609951.074:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7617 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1f8e929 code=0x7ffc0000 [ 156.582541][ T7639] tun0: tun_chr_ioctl cmd 1074025678 [ 156.596934][ T7639] tun0: group set to 0 [ 157.286795][ T5943] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 157.468510][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 157.498072][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.535929][ T5943] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 157.558031][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.600287][ T5943] usb 2-1: config 0 descriptor?? [ 157.608798][ T7662] netlink: 'syz.0.766': attribute type 1 has an invalid length. [ 157.636847][ T5943] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 157.914414][ T5178] bcm5974 2-1:0.0: could not read from device [ 157.948644][ T5943] usb 2-1: USB disconnect, device number 9 [ 157.956177][ T5178] bcm5974 2-1:0.0: could not read from device [ 158.667837][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 159.904421][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.795'. [ 160.266034][ T7743] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.804'. [ 160.602608][ T7751] netlink: 44 bytes leftover after parsing attributes in process `syz.2.808'. [ 161.053784][ T7769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.815'. [ 161.100308][ T36] bond0: (slave bond1): link status definitely down, disabling slave [ 162.314931][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.828'. [ 162.581865][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 162.770263][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.803578][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.813460][ T43] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 162.851889][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.872531][ T43] usb 1-1: config 0 descriptor?? [ 162.912332][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.838'. [ 162.922496][ T7817] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 162.929828][ T7817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.328267][ T43] pyra 0003:1E7D:2CF6.0005: unexpected long global item [ 163.336043][ T43] pyra 0003:1E7D:2CF6.0005: parse failed [ 163.359069][ T43] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -22 [ 163.564201][ T43] usb 1-1: USB disconnect, device number 5 [ 163.995088][ T7842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.850'. [ 164.942124][ T7871] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.861'. [ 165.365314][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 165.365334][ T30] audit: type=1326 audit(1749609959.997:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7883 comm="syz.5.867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71d1f8e929 code=0x0 [ 165.485013][ T49] tipc: Subscription rejected, illegal request [ 166.205782][ T7911] vim2m vim2m.0: vidioc_s_fmt queue busy [ 167.487152][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.496799][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.507604][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.527582][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.555174][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.680133][ T7951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.895'. [ 167.698058][ T453] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.886095][ T453] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.029734][ T453] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.175565][ T453] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.318149][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.904'. [ 168.704507][ T453] bridge_slave_1: left allmulticast mode [ 168.710645][ T453] bridge_slave_1: left promiscuous mode [ 168.733423][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.786166][ T453] bridge_slave_0: left allmulticast mode [ 168.803624][ T453] bridge_slave_0: left promiscuous mode [ 168.809484][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.470405][ T453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.482366][ T453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.492794][ T453] bond0 (unregistering): Released all slaves [ 169.510204][ T7991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.518901][ T7991] batadv_slave_1: entered promiscuous mode [ 169.537736][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 169.658223][ T7945] chnl_net:caif_netlink_parms(): no params data found [ 169.723506][ T5836] Bluetooth: hci4: command tx timeout [ 170.510153][ T453] hsr_slave_0: left promiscuous mode [ 170.530921][ T453] hsr_slave_1: left promiscuous mode [ 170.538577][ T453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.555187][ T453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.568408][ T453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.579381][ T453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.619301][ T453] veth1_macvtap: left promiscuous mode [ 170.625263][ T453] veth0_macvtap: left promiscuous mode [ 170.631982][ T453] veth1_vlan: left promiscuous mode [ 170.637542][ T453] veth0_vlan: left promiscuous mode [ 170.767650][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 170.951142][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 170.972112][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.992528][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.009436][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 171.024163][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 171.033952][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.061384][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 171.081231][ T43] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 171.100691][ T43] usb 1-1: Manufacturer: syz [ 171.114577][ T43] usb 1-1: config 0 descriptor?? [ 171.299611][ T453] team0 (unregistering): Port device team_slave_1 removed [ 171.356411][ T453] team0 (unregistering): Port device team_slave_0 removed [ 171.457078][ T43] rc_core: IR keymap rc-hauppauge not found [ 171.463414][ T43] Registered IR keymap rc-empty [ 171.479311][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 171.505684][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 171.541418][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 171.579067][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 171.609599][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 171.648960][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 171.685598][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 171.723365][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 171.762039][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 171.795119][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 171.828190][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 171.853835][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 171.892819][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 171.922439][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 171.930695][ T7945] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.938374][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.945826][ T5836] Bluetooth: hci4: command tx timeout [ 171.953602][ T43] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 171.973511][ T7945] bridge_slave_0: entered allmulticast mode [ 171.984248][ T43] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 171.993121][ T7945] bridge_slave_0: entered promiscuous mode [ 172.006987][ T7945] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.014621][ T43] usb 1-1: USB disconnect, device number 6 [ 172.024408][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.036506][ T7945] bridge_slave_1: entered allmulticast mode [ 172.052873][ T7945] bridge_slave_1: entered promiscuous mode [ 172.240498][ T7945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.267925][ T7945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.430941][ T7945] team0: Port device team_slave_0 added [ 172.451795][ T7945] team0: Port device team_slave_1 added [ 172.587599][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.606419][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.632372][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.681395][ T7945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.720578][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.734650][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.760585][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.805956][ T7945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.821595][ T8067] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 172.821595][ T8067] The task syz.0.941 (8067) triggered the difference, watch for misbehavior. [ 173.022431][ T7945] hsr_slave_0: entered promiscuous mode [ 173.029590][ T7945] hsr_slave_1: entered promiscuous mode [ 173.044136][ T7945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.053935][ T7945] Cannot create hsr debugfs directory [ 173.169223][ T8078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.203853][ T8076] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 173.530897][ T30] audit: type=1326 audit(1749609967.630:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.1.956" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f84b2d858e7 code=0x0 [ 173.632428][ T7945] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 173.655788][ T7945] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 173.690576][ T7945] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 173.712636][ T7945] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.005051][ T7945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.050264][ T7945] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.090478][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.097743][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.125941][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.133279][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.167523][ T5836] Bluetooth: hci4: command tx timeout [ 174.531135][ T5824] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.679583][ T7945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.717079][ T5824] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 174.748967][ T5824] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.769319][ T5824] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.808779][ T5824] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.824329][ T5824] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.833637][ T5824] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.860001][ T5824] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.879317][ T5824] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.905083][ T5824] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.937857][ T5824] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.949696][ T5824] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.960949][ T5824] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.976860][ T5824] usb 1-1: config 0 interface 0 has no altsetting 0 [ 175.003469][ T5824] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.022623][ T5824] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.076118][ T5824] usb 1-1: config 0 interface 0 has no altsetting 0 [ 175.094081][ T5824] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.110738][ T5824] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.136741][ T5824] usb 1-1: config 0 interface 0 has no altsetting 0 [ 175.173827][ T5824] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.183101][ T5824] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.210152][ T5824] usb 1-1: config 0 interface 0 has no altsetting 0 [ 175.222570][ T5824] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.232765][ T8151] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 175.247260][ T5824] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.293020][ T5824] usb 1-1: config 0 interface 0 has no altsetting 0 [ 175.324990][ T5824] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 175.345393][ T5824] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 175.370369][ T5824] usb 1-1: Product: syz [ 175.374650][ T5824] usb 1-1: Manufacturer: syz [ 175.396889][ T5824] usb 1-1: SerialNumber: syz [ 175.415385][ T5824] usb 1-1: config 0 descriptor?? [ 175.439306][ T5824] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 175.509579][ T7945] veth0_vlan: entered promiscuous mode [ 175.532192][ T7945] veth1_vlan: entered promiscuous mode [ 175.606483][ T7945] veth0_macvtap: entered promiscuous mode [ 175.643023][ T7945] veth1_macvtap: entered promiscuous mode [ 175.679312][ T7945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.716691][ T7945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.730323][ T5885] usb 1-1: USB disconnect, device number 7 [ 175.747268][ T5885] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 175.767746][ T7945] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.788340][ T7945] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.810409][ T7945] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.821713][ T7945] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.867151][ T5824] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 175.982429][ T453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.003709][ T453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.042726][ T5824] usb 6-1: Using ep0 maxpacket: 32 [ 176.059779][ T5824] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 176.082572][ T5824] usb 6-1: config 0 has no interface number 0 [ 176.096129][ T5824] usb 6-1: config 0 interface 2 has no altsetting 0 [ 176.140383][ T5824] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 176.151859][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.174072][ T5824] usb 6-1: Product: syz [ 176.177679][ T3037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.186225][ T5824] usb 6-1: Manufacturer: syz [ 176.205904][ T5824] usb 6-1: SerialNumber: syz [ 176.309860][ T5824] usb 6-1: config 0 descriptor?? [ 176.377638][ T3037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.391127][ T5836] Bluetooth: hci4: command tx timeout [ 176.598643][ T5824] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.808645][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.881'. [ 176.932923][ T5824] usb 6-1: invalid MIDI in EP 0 [ 176.986868][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 177.045213][ T5824] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 177.069654][ T5824] usb 6-1: USB disconnect, device number 2 [ 177.137926][ T8186] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.993'. [ 177.441212][ T8198] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.451809][ T8198] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.461799][ T8198] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.470726][ T8198] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.674832][ T453] wlan1: Trigger new scan to find an IBSS to join [ 177.696443][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1003'. [ 177.975695][ T8222] loop6: detected capacity change from 0 to 63 [ 177.999107][ T8222] buffer_io_error: 6 callbacks suppressed [ 177.999129][ T8222] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 178.023993][ T8222] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 178.032757][ T8222] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 178.042540][ T8222] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 178.051556][ T8222] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 178.062967][ T8222] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 178.087059][ T8222] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 178.314137][ T8235] IPVS: sh: FWM 4 0x00000004 - no destination available [ 178.325550][ T5824] IPVS: starting estimator thread 0... [ 178.439758][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 178.449526][ T8237] IPVS: using max 27 ests per chain, 64800 per kthread [ 178.576525][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 178.724232][ T8255] loop6: detected capacity change from 0 to 63 [ 178.740460][ T8255] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.753204][ T8255] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.774875][ T8255] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.790623][ T8255] ldm_validate_partition_table(): Disk read failed. [ 178.798289][ T8255] Dev loop6: unable to read RDB block 0 [ 178.804447][ T8255] loop6: unable to read partition table [ 178.816103][ T8255] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 179.138608][ T8273] netlink: 'syz.6.1036': attribute type 1 has an invalid length. [ 180.656648][ T5943] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 180.829616][ T5943] usb 1-1: config 1 has an invalid interface number: 114 but max is 0 [ 180.840212][ T12] wlan1: Trigger new scan to find an IBSS to join [ 180.851990][ T5943] usb 1-1: config 1 has no interface number 0 [ 180.881283][ T5943] usb 1-1: config 1 interface 114 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.912883][ T5943] usb 1-1: New USB device found, idVendor=12d1, idProduct=aa6e, bcdDevice=b1.16 [ 180.924446][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.932530][ T5943] usb 1-1: Product: syz [ 180.958583][ T5943] usb 1-1: Manufacturer: syz [ 180.963265][ T5943] usb 1-1: SerialNumber: syz [ 181.149739][ T8349] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1069'. [ 181.206459][ T5943] option 1-1:1.114: GSM modem (1-port) converter detected [ 181.213845][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 181.232621][ T5943] usb 1-1: USB disconnect, device number 8 [ 181.246956][ T5943] option 1-1:1.114: device disconnected [ 181.399198][ T9] usb 2-1: config 0 has an invalid interface number: 93 but max is 0 [ 181.420487][ T9] usb 2-1: config 0 has no interface number 0 [ 181.444787][ T9] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 181.467139][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.495120][ T9] usb 2-1: Product: syz [ 181.514813][ T9] usb 2-1: Manufacturer: syz [ 181.519515][ T9] usb 2-1: SerialNumber: syz [ 181.550973][ T9] usb 2-1: config 0 descriptor?? [ 181.817712][ T9] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 181.869439][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 181.900363][ T9] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 181.952561][ T9] usb 2-1: media controller created [ 181.984334][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.193091][ T9] DVB: Unable to find symbol dib7000p_attach() [ 182.200865][ T8375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.216554][ T9] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 182.247428][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 182.287220][ T9] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 182.314965][ T9] usb 2-1: media controller created [ 182.362099][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.409973][ T9] dib0700: the master dib7090 has to be initialized first [ 182.438688][ T9] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 182.578758][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 182.596477][ T9] Registered IR keymap rc-empty [ 182.634610][ T9] dvb-usb: could not initialize remote control. [ 182.640940][ T9] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 182.943228][ T9] usb 2-1: USB disconnect, device number 10 [ 182.997942][ T9] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 183.513335][ T8406] Falling back ldisc for ptm0. [ 183.947409][ T30] audit: type=1326 audit(1749609977.377:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.1.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b2d8e929 code=0x7ffc0000 [ 184.033291][ T30] audit: type=1326 audit(1749609977.377:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.1.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b2d8e929 code=0x7ffc0000 [ 184.072561][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1106'. [ 184.089233][ T3037] wlan1: Trigger new scan to find an IBSS to join [ 184.089280][ T9] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 184.122935][ T30] audit: type=1326 audit(1749609977.405:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.1.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f84b2d8e929 code=0x7ffc0000 [ 184.186711][ T30] audit: type=1326 audit(1749609977.405:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.1.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b2d8e929 code=0x7ffc0000 [ 184.239266][ T30] audit: type=1326 audit(1749609977.405:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.1.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b2d8e929 code=0x7ffc0000 [ 184.287496][ T30] audit: type=1326 audit(1749609977.405:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.1.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f84b2d8e929 code=0x7ffc0000 [ 184.368869][ T9] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.380192][ T9] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 184.391232][ T30] audit: type=1326 audit(1749609977.415:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.1.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b2d8e929 code=0x7ffc0000 [ 184.415785][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.422841][ T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 184.437418][ T30] audit: type=1326 audit(1749609977.415:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.1.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b2d8e929 code=0x7ffc0000 [ 184.473269][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.496692][ T9] usb 3-1: config 0 descriptor?? [ 184.504468][ T8422] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.525335][ T30] audit: type=1326 audit(1749609977.415:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.1.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f84b2d8e929 code=0x7ffc0000 [ 184.584682][ T30] audit: type=1326 audit(1749609977.415:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.1.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b2d8e929 code=0x7ffc0000 [ 184.982278][ T9] holtek_mouse 0003:04D9:A067.0006: unknown main item tag 0x0 [ 185.020793][ T9] holtek_mouse 0003:04D9:A067.0006: unknown main item tag 0x0 [ 185.068029][ T9] holtek_mouse 0003:04D9:A067.0006: unknown main item tag 0x0 [ 185.118755][ T9] holtek_mouse 0003:04D9:A067.0006: unknown main item tag 0x0 [ 185.156138][ T9] holtek_mouse 0003:04D9:A067.0006: unknown main item tag 0x0 [ 185.167660][ T2984] wlan1: Creating new IBSS network, BSSID 2e:75:e2:6c:f7:ab [ 185.230358][ T9] holtek_mouse 0003:04D9:A067.0006: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input0 [ 185.318962][ T9] usb 3-1: USB disconnect, device number 8 [ 186.269207][ T5943] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 186.451036][ T5943] usb 1-1: Using ep0 maxpacket: 32 [ 186.458780][ T5943] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 186.467406][ T5943] usb 1-1: config 4 has no interface number 0 [ 186.479181][ T5943] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.493592][ T5943] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.503755][ T5943] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 186.513195][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.532119][ T5943] hub 1-1:4.128: USB hub found [ 186.675337][ T5905] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.728854][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 186.755649][ T5943] hub 1-1:4.128: 2 ports detected [ 186.771549][ T5943] hub 1-1:4.128: Using single TT (err -22) [ 186.858612][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 186.869817][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 186.890043][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 186.903394][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 186.913658][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 186.925071][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 186.934234][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 186.965993][ T43] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 186.977220][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.987164][ T5905] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 187.006681][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.025354][ T43] usb 6-1: config 0 descriptor?? [ 187.032071][ T5905] usb 2-1: Product: syz [ 187.036752][ T5905] usb 2-1: Manufacturer: syz [ 187.060356][ T5905] usb 2-1: SerialNumber: syz [ 187.071990][ T5905] usb 2-1: config 0 descriptor?? [ 187.201821][ T5943] usb 1-1: USB disconnect, device number 9 [ 187.279047][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 187.317489][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.334816][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 187.352512][ T43] usb 6-1: media controller created [ 187.401466][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.504378][ T43] az6027: usb out operation failed. (-71) [ 187.516833][ T43] az6027: usb out operation failed. (-71) [ 187.530606][ T43] stb0899_attach: Driver disabled by Kconfig [ 187.545522][ T5905] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 187.551751][ T43] az6027: no front-end attached [ 187.551751][ T43] [ 187.562801][ T43] az6027: usb out operation failed. (-71) [ 187.568614][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 187.576352][ T5905] input input13: Device does not respond to id packet M [ 187.589707][ T5905] input input13: Device does not respond to id packet P [ 187.600467][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 187.614780][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 187.621903][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 187.637660][ T43] usb 6-1: USB disconnect, device number 3 [ 187.724933][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 187.805101][ T5905] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 187.812008][ T5905] input input13: Device does not respond to id packet B [ 187.823162][ T5905] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 187.833612][ T5905] input input13: Device does not respond to id packet N [ 187.856437][ T5905] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 187.882032][ T5905] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 187.894631][ T5905] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 187.901301][ T5905] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 187.919890][ T5905] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 187.971710][ T5905] usb 2-1: USB disconnect, device number 11 [ 189.133610][ T8599] sg_write: process 98 (syz.6.1180) changed security contexts after opening file descriptor, this is not allowed. [ 189.251712][ T5905] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 189.273767][ T8605] netlink: 'syz.0.1184': attribute type 1 has an invalid length. [ 189.426560][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 189.441039][ T5905] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 189.449599][ T5905] usb 6-1: config 0 has no interface number 0 [ 189.498060][ T5905] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 189.531614][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.539733][ T5905] usb 6-1: Product: syz [ 189.544928][ T5905] usb 6-1: Manufacturer: syz [ 189.549903][ T5905] usb 6-1: SerialNumber: syz [ 189.565751][ T5905] usb 6-1: config 0 descriptor?? [ 189.574151][ T5905] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 189.815558][ T5905] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 189.882113][ T5905] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 189.893261][ T5824] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 190.052001][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.085137][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.096366][ T5824] usb 7-1: Using ep0 maxpacket: 8 [ 190.103991][ T5824] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 190.134792][ T5824] usb 7-1: config 179 has no interface number 0 [ 190.161818][ T5824] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 190.173434][ T5824] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 190.220029][ T5824] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.247600][ T5824] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 190.269373][ T5824] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 190.307552][ T5824] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 190.336565][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.361782][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 190.363013][ T5943] usb 6-1: USB disconnect, device number 4 [ 190.386794][ T8622] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 190.412546][ T5943] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 190.468554][ T5943] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 190.533348][ T5943] quatech2 6-1:0.51: device disconnected [ 191.334021][ T5943] usb 7-1: USB disconnect, device number 2 [ 191.334053][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 191.348376][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 191.357428][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.860378][ T5943] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 192.031265][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 192.079120][ T5943] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 192.098417][ T5943] usb 3-1: config 0 has no interface number 0 [ 192.120646][ T5943] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 192.143896][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.166340][ T5943] usb 3-1: Product: syz [ 192.176624][ T5943] usb 3-1: Manufacturer: syz [ 192.201392][ T5943] usb 3-1: SerialNumber: syz [ 192.211013][ T5943] usb 3-1: config 0 descriptor?? [ 192.229636][ T5943] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 192.455767][ T5943] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 192.495142][ T5943] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 192.674331][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1238'. [ 192.684091][ T8767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1238'. [ 192.901606][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 192.902860][ T5824] usb 3-1: USB disconnect, device number 9 [ 192.925382][ T5824] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 192.983505][ T5824] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 193.041051][ T5824] quatech2 3-1:0.51: device disconnected [ 193.936187][ T8821] netlink: 'syz.6.1260': attribute type 25 has an invalid length. [ 194.108618][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1264'. [ 194.126668][ T8830] netlink: 'syz.0.1264': attribute type 30 has an invalid length. [ 194.134569][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'. [ 194.389300][ T8841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1270'. [ 194.403147][ T8844] syz.1.1271 uses obsolete (PF_INET,SOCK_PACKET) [ 194.932485][ T8864] mkiss: ax0: crc mode is auto. [ 196.264095][ T8897] xt_hashlimit: size too large, truncated to 1048576 [ 196.303917][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 196.303937][ T30] audit: type=1107 audit(1749609988.929:68): pid=8896 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 196.315528][ T8900] : renamed from vxcan1 (while UP) [ 196.596847][ T8907] dummy0: entered promiscuous mode [ 196.621484][ T8907] macsec1: entered promiscuous mode [ 196.628414][ T8907] macsec1: entered allmulticast mode [ 196.637458][ T8907] dummy0: entered allmulticast mode [ 196.698545][ T8907] dummy0: left allmulticast mode [ 196.724397][ T8907] dummy0: left promiscuous mode [ 197.194983][ T5824] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 197.233925][ T8925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.243585][ T8925] bond0: (slave bond1): Enslaving as an active interface with an up link [ 197.367609][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 197.378640][ T5824] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 197.401985][ T5824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.432366][ T5824] usb 3-1: config 0 has no interface number 0 [ 197.443653][ T5824] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 197.458250][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.472549][ T5824] usb 3-1: Product: syz [ 197.478682][ T5824] usb 3-1: Manufacturer: syz [ 197.488392][ T5824] usb 3-1: SerialNumber: syz [ 197.516247][ T5824] usb 3-1: config 0 descriptor?? [ 197.546872][ T5824] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 197.560803][ T5824] usb 3-1: No valid video chain found. [ 197.808455][ T9] usb 3-1: USB disconnect, device number 10 [ 197.879087][ T5824] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 197.925746][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 198.039771][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 198.053957][ T5824] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 198.068505][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.087568][ T5824] usb 1-1: Product: syz [ 198.097107][ T5824] usb 1-1: Manufacturer: syz [ 198.101788][ T5824] usb 1-1: SerialNumber: syz [ 198.120537][ T5824] usb 1-1: config 0 descriptor?? [ 198.146134][ T5824] gspca_main: se401-2.14.0 probing 047d:5003 [ 198.379152][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.385747][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.432445][ T8973] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1331'. [ 198.620691][ T5824] gspca_se401: Too many frame sizes [ 198.686541][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 198.755826][ T8982] block nbd0: server does not support multiple connections per device. [ 198.781372][ T8982] block nbd0: shutting down sockets [ 198.818452][ T8973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.838879][ T8973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.861509][ T5824] usb 1-1: USB disconnect, device number 10 [ 198.875420][ T8973] bond0 (unregistering): Released all slaves [ 198.920145][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 198.945688][ T8984] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1336'. [ 198.968944][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 199.001925][ T8984] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1336'. [ 199.568290][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 311.969140][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 311.976420][ C1] rcu: 0-...!: (1 GPs behind) idle=a19c/1/0x4000000000000000 softirq=34319/34323 fqs=0 [ 311.987187][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8641/1:b..l [ 311.995154][ C1] rcu: (detected by 1, t=10506 jiffies, g=29321, q=216 ncpus=2) [ 312.003015][ C1] Sending NMI from CPU 1 to CPUs 0: [ 312.003055][ C0] NMI backtrace for cpu 0 [ 312.003158][ C0] CPU: 0 UID: 0 PID: 9019 Comm: syz.5.1353 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 312.003179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.003190][ C0] RIP: 0010:check_preemption_disabled+0x17/0x120 [ 312.003229][ C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 48 83 ec 10 65 48 8b 05 fe ad 3a 07 48 89 44 24 08 <65> 8b 05 06 ae 3a 07 65 8b 0d fb ad 3a 07 f7 c1 ff ff ff 7f 74 23 [ 312.003244][ C0] RSP: 0018:ffffc90000007b88 EFLAGS: 00000086 [ 312.003259][ C0] RAX: f28f9229ddb77800 RBX: 0000000000000000 RCX: f28f9229ddb77800 [ 312.003271][ C0] RDX: 0000000000000000 RSI: ffffffff8db594ef RDI: ffffffff8be1af80 [ 312.003283][ C0] RBP: ffffffff897e8bb4 R08: 0000000000000000 R09: ffffffff897e8bb4 [ 312.003294][ C0] R10: dffffc0000000000 R11: ffffffff897e8af0 R12: 0000000000000000 [ 312.003306][ C0] R13: ffff8880212e4300 R14: 0000000000000001 R15: 0000000000000046 [ 312.003318][ C0] FS: 00007f71d2dda6c0(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 312.003332][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.003344][ C0] CR2: 0000200000000040 CR3: 000000002f9d0000 CR4: 00000000003526f0 [ 312.003359][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 312.003369][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 312.003379][ C0] Call Trace: [ 312.003391][ C0] [ 312.003398][ C0] ? advance_sched+0xc4/0xc90 [ 312.003425][ C0] ? advance_sched+0xc4/0xc90 [ 312.003445][ C0] lock_acquire+0x130/0x360 [ 312.003474][ C0] _raw_spin_lock+0x2e/0x40 [ 312.003496][ C0] ? advance_sched+0xc4/0xc90 [ 312.003517][ C0] advance_sched+0xc4/0xc90 [ 312.003539][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 312.003563][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 312.003591][ C0] ? __pfx_advance_sched+0x10/0x10 [ 312.003612][ C0] __hrtimer_run_queues+0x529/0xc60 [ 312.003647][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 312.003671][ C0] ? read_tsc+0x9/0x20 [ 312.003695][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 312.003738][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 312.003766][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 312.003792][ C0] [ 312.003797][ C0] [ 312.003804][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.003823][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 312.003848][ C0] Code: 74 05 e8 fb 7d 66 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 69 2f f6 65 8b 05 ec 43 38 07 85 c0 74 40 48 c7 04 24 0e 36 [ 312.003861][ C0] RSP: 0018:ffffc9000ccafb60 EFLAGS: 00000206 [ 312.003876][ C0] RAX: f28f9229ddb77800 RBX: 0000000000000a06 RCX: f28f9229ddb77800 [ 312.003888][ C0] RDX: 0000000000000007 RSI: ffffffff8d96d7f4 RDI: 0000000000000001 [ 312.003898][ C0] RBP: ffffc9000ccafbf0 R08: ffffffff8f9fdef7 R09: 1ffffffff1f3fbde [ 312.003911][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fbdf R12: dffffc0000000000 [ 312.003923][ C0] R13: ffff8880b8627ac0 R14: ffff8880b8627ac0 R15: 1ffff92001995f6c [ 312.003945][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 312.003969][ C0] ? read_tsc+0x9/0x20 [ 312.003993][ C0] clock_was_set+0x63b/0x7c0 [ 312.004022][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 312.004043][ C0] ? do_settimeofday64+0x2d1/0x5e0 [ 312.004063][ C0] ? timekeeping_update_from_shadow+0x2b1/0x350 [ 312.004084][ C0] do_settimeofday64+0x2ec/0x5e0 [ 312.004101][ C0] ? safesetid_security_capable+0xa9/0x1a0 [ 312.004127][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 312.004145][ C0] ? surface_hid_device_add+0x123/0xae0 [ 312.004173][ C0] ? bpf_lsm_settime+0x9/0x20 [ 312.004187][ C0] ? security_settime64+0x76/0x290 [ 312.004215][ C0] ? do_sys_settimeofday64+0x163/0x260 [ 312.004236][ C0] __x64_sys_clock_settime+0x22c/0x280 [ 312.004259][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 312.004279][ C0] ? rcu_is_watching+0x15/0xb0 [ 312.004307][ C0] ? do_syscall_64+0xbe/0x3b0 [ 312.004323][ C0] do_syscall_64+0xfa/0x3b0 [ 312.004338][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.004363][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.004380][ C0] ? clear_bhb_loop+0x60/0xb0 [ 312.004400][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.004417][ C0] RIP: 0033:0x7f71d1f8e929 [ 312.004438][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.004451][ C0] RSP: 002b:00007f71d2dda038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 312.004468][ C0] RAX: ffffffffffffffda RBX: 00007f71d21b5fa0 RCX: 00007f71d1f8e929 [ 312.004480][ C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 312.004490][ C0] RBP: 00007f71d2010b39 R08: 0000000000000000 R09: 0000000000000000 [ 312.004501][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.004510][ C0] R13: 0000000000000000 R14: 00007f71d21b5fa0 R15: 00007fffb8f2c388 [ 312.004530][ C0] [ 312.005045][ C1] task:kworker/u8:24 state:R running task stack:24336 pid:8641 tgid:8641 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 312.522435][ C1] Workqueue: bat_events batadv_nc_worker [ 312.528117][ C1] Call Trace: [ 312.531427][ C1] [ 312.534394][ C1] __schedule+0x16a2/0x4cb0 [ 312.539039][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 312.544981][ C1] ? __lock_acquire+0xab9/0xd20 [ 312.549870][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 312.555208][ C1] ? __pfx___schedule+0x10/0x10 [ 312.560106][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 312.565343][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 312.570687][ C1] preempt_schedule_irq+0xb5/0x150 [ 312.576008][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 312.581802][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 312.587751][ C1] irqentry_exit+0x6f/0x90 [ 312.592207][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.598311][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 312.603632][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 2b 7b fb 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 312.623356][ C1] RSP: 0018:ffffc90004517980 EFLAGS: 00000206 [ 312.629543][ C1] RAX: acf7e49b5b718c00 RBX: 0000000000000000 RCX: acf7e49b5b718c00 [ 312.637568][ C1] RDX: 0000000000000000 RSI: ffffffff8db594ef RDI: ffffffff8be1af80 [ 312.645655][ C1] RBP: ffffffff8b2ca492 R08: 0000000000000000 R09: ffffffff8b2ca492 [ 312.653657][ C1] R10: dffffc0000000000 R11: ffffffff8b2ca3c0 R12: 0000000000000002 [ 312.661657][ C1] R13: ffffffff8e13eda0 R14: 0000000000000000 R15: 0000000000000246 [ 312.669771][ C1] ? batadv_nc_worker+0xd2/0x610 [ 312.674903][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 312.680325][ C1] ? batadv_nc_worker+0xd2/0x610 [ 312.685331][ C1] ? batadv_nc_worker+0xd2/0x610 [ 312.690328][ C1] ? batadv_nc_worker+0xd2/0x610 [ 312.695406][ C1] batadv_nc_worker+0xef/0x610 [ 312.700222][ C1] ? batadv_nc_worker+0xd2/0x610 [ 312.705288][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 312.711050][ C1] process_scheduled_works+0xade/0x17b0 [ 312.716688][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.722733][ C1] worker_thread+0x8a0/0xda0 [ 312.727582][ C1] kthread+0x70e/0x8a0 [ 312.731786][ C1] ? __pfx_worker_thread+0x10/0x10 [ 312.736942][ C1] ? __pfx_kthread+0x10/0x10 [ 312.741567][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.746811][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.752057][ C1] ? __pfx_kthread+0x10/0x10 [ 312.756768][ C1] ret_from_fork+0x3fc/0x770 [ 312.761493][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 312.766652][ C1] ? __switch_to_asm+0x39/0x70 [ 312.771451][ C1] ? __switch_to_asm+0x33/0x70 [ 312.776251][ C1] ? __pfx_kthread+0x10/0x10 [ 312.780894][ C1] ret_from_fork_asm+0x1a/0x30 [ 312.785773][ C1] [ 312.788821][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g29321 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 312.800216][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 312.810382][ C1] rcu: RCU grace-period kthread stack dump: [ 312.816752][ C1] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 312.830461][ C1] Call Trace: [ 312.833766][ C1] [ 312.836733][ C1] __schedule+0x16a2/0x4cb0 [ 312.841288][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 312.846533][ C1] ? schedule+0x165/0x360 [ 312.850904][ C1] ? __lock_acquire+0xab9/0xd20 [ 312.855790][ C1] ? __pfx___schedule+0x10/0x10 [ 312.860699][ C1] ? schedule+0x91/0x360 [ 312.865022][ C1] schedule+0x165/0x360 [ 312.869394][ C1] schedule_timeout+0x12b/0x270 [ 312.874367][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 312.879880][ C1] ? __pfx_process_timeout+0x10/0x10 [ 312.885303][ C1] ? prepare_to_swait_event+0x341/0x380 [ 312.890895][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 312.895798][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 312.900778][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.906107][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 312.911430][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 312.916677][ C1] ? finish_swait+0xcd/0x1f0 [ 312.921313][ C1] rcu_gp_kthread+0x99/0x390 [ 312.925945][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 312.931186][ C1] ? __kthread_parkme+0x7b/0x200 [ 312.936169][ C1] ? __kthread_parkme+0x1a1/0x200 [ 312.941246][ C1] kthread+0x70e/0x8a0 [ 312.945440][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 312.950675][ C1] ? __pfx_kthread+0x10/0x10 [ 312.955474][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.960720][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.965966][ C1] ? __pfx_kthread+0x10/0x10 [ 312.970601][ C1] ret_from_fork+0x3fc/0x770 [ 312.975237][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 312.980389][ C1] ? __switch_to_asm+0x39/0x70 [ 312.985182][ C1] ? __switch_to_asm+0x33/0x70 [ 312.989970][ C1] ? __pfx_kthread+0x10/0x10 [ 312.994597][ C1] ret_from_fork_asm+0x1a/0x30 [ 312.999417][ C1] [ 313.002464][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 313.008818][ C1] CPU: 1 UID: 0 PID: 7945 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 313.021169][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.031249][ C1] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 313.037973][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 50 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 fb 73 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 e0 73 0b [ 313.057954][ C1] RSP: 0018:ffffc90004bf7580 EFLAGS: 00000293 [ 313.064150][ C1] RAX: ffffffff81b4da10 RBX: ffff8880b873c9c0 RCX: ffff8880252c3c00 [ 313.072153][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 313.080153][ C1] RBP: ffffc90004bf76e0 R08: ffffffff8f9fdef7 R09: 1ffffffff1f3fbde [ 313.088151][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fbdf R12: 1ffff110170c868d [ 313.096151][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8643468 [ 313.104150][ C1] FS: 00005555840f6500(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 313.113110][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.119719][ C1] CR2: 00007fb7a46e56c0 CR3: 000000003075c000 CR4: 00000000003526f0 [ 313.127720][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 313.135907][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 313.143913][ C1] Call Trace: [ 313.147319][ C1] [ 313.150294][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 313.156678][ C1] ? ldt_dup_context+0x336/0x3e0 [ 313.161755][ C1] ? rcu_is_watching+0x15/0xb0 [ 313.166594][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 313.171923][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 313.177086][ C1] flush_tlb_mm_range+0x6b1/0x12c0 [ 313.182248][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 313.187843][ C1] ? up_write+0x1c4/0x420 [ 313.192212][ C1] dup_mmap+0x15a0/0x1ac0 [ 313.196613][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 313.201337][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 313.207268][ C1] ? mm_init+0xca7/0xf00 [ 313.211646][ C1] copy_mm+0x13c/0x4b0 [ 313.215848][ C1] copy_process+0x1706/0x3c00 [ 313.220589][ C1] ? copy_process+0x97f/0x3c00 [ 313.225532][ C1] ? __pfx_copy_process+0x10/0x10 [ 313.230611][ C1] ? __handle_mm_fault+0x1144/0x5620 [ 313.236026][ C1] kernel_clone+0x224/0x7f0 [ 313.240563][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 313.245674][ C1] __x64_sys_clone+0x18b/0x1e0 [ 313.250501][ C1] ? count_memcg_event_mm+0x21/0x260 [ 313.255846][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 313.261324][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 313.266653][ C1] ? do_syscall_64+0xbe/0x3b0 [ 313.271380][ C1] do_syscall_64+0xfa/0x3b0 [ 313.275916][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.281152][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.287279][ C1] ? clear_bhb_loop+0x60/0xb0 [ 313.291990][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.297913][ C1] RIP: 0033:0x7fb7a3985193 [ 313.302440][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 313.322167][ C1] RSP: 002b:00007ffff40f4e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 313.330788][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb7a3985193 [ 313.338793][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 313.346790][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 313.354788][ C1] R10: 00005555840f67d0 R11: 0000000000000246 R12: 0000000000000000 [ 313.362800][ C1] R13: 00000000000927c0 R14: 000000000002fb46 R15: 00007ffff40f4fe0 [ 313.370825][ C1] [ 313.374349][ C1] vkms_vblank_simulate: vblank timer overrun